<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: States of Login</title>
	<atom:link href="http://www.uie.com/brainsparks/2007/09/23/states-of-login/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/</link>
	<description>UIE\'s latest insights on the world of design</description>
	<pubDate>Fri,  5 Dec 2008 13:18:43 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
		<item>
		<title>By: Matthew</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-143639</link>
		<dc:creator>Matthew</dc:creator>
		<pubDate>Wed, 27 Aug 2008 15:21:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-143639</guid>
		<description>Regarding Natasha Lloyd’s comment about Linked In I think in a different way and must say that the Linked In log-in is one of the best. Why ?
Let’s say you use Linked In website once a week, the idea is that when you come back you can still browse the web site but if you want to make an action such as: comment, modify personal data, add friend you must register.

And the problem here is the same, the lack of explanation not the process.</description>
		<content:encoded><![CDATA[<p>Regarding Natasha Lloyd’s comment about Linked In I think in a different way and must say that the Linked In log-in is one of the best. Why ?<br />
Let’s say you use Linked In website once a week, the idea is that when you come back you can still browse the web site but if you want to make an action such as: comment, modify personal data, add friend you must register.</p>
<p>And the problem here is the same, the lack of explanation not the process.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Emily</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89395</link>
		<dc:creator>Emily</dc:creator>
		<pubDate>Wed, 26 Sep 2007 18:31:40 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89395</guid>
		<description>I recently placed an order on a site called Knitpicks.com, which exhibits a different annoying behavior. It allows you to select items and place them in your basket, just as Amazon does. When you try to check out, it prompts you to login--again, apparently manifesting the same behavior as Amazon. But when you do check in, it empties your basket! That is to say, it forgets about tempuser192837, realizes that I'm Emily, and shows me my own basket, which is empty, since I purchased everything out of it the last time I used the site, months ago. 

The only ways around this are to register a new account (using a new email address, or you'll get an error) every time you use the site, or to remember to log in immediately when visiting the site--even though it has cookies that make it seem like this is unnecessary.

The site drives me up the wall, and I've emailed them to explain the problem, but no response yet...</description>
		<content:encoded><![CDATA[<p>I recently placed an order on a site called Knitpicks.com, which exhibits a different annoying behavior. It allows you to select items and place them in your basket, just as Amazon does. When you try to check out, it prompts you to login&#8211;again, apparently manifesting the same behavior as Amazon. But when you do check in, it empties your basket! That is to say, it forgets about tempuser192837, realizes that I&#8217;m Emily, and shows me my own basket, which is empty, since I purchased everything out of it the last time I used the site, months ago. </p>
<p>The only ways around this are to register a new account (using a new email address, or you&#8217;ll get an error) every time you use the site, or to remember to log in immediately when visiting the site&#8211;even though it has cookies that make it seem like this is unnecessary.</p>
<p>The site drives me up the wall, and I&#8217;ve emailed them to explain the problem, but no response yet&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ben Bodien</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89376</link>
		<dc:creator>Ben Bodien</dc:creator>
		<pubDate>Wed, 26 Sep 2007 09:31:19 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89376</guid>
		<description>I've long been curious about this aspect of Amazon, it's something I quite like about it because if you want to just browse for a bit, you don't need to authenticate in order to get personally tailored content.

The one thing that did piss me off big time about Amazon (on the .co.uk at least, and I think they've fixed it recently), was their login form. It had the email address field, then radio buttons for "I'm new", or "I'm a returning customer, and my password is: (text input field)".

This is great and intuitive, but if you land on this page suddenly when you attempt to access order information or something on the high security level, your eye recognises a login form with two text input boxes and a login button. Straight away you type a password into the relevant field and hit enter on the keyboard, but wait! The radio button is still in the default position of "I'm new". 

They recognised the problem, but rather than solving the issue properly, they handled the symptom with a special error message: "You said you're new but you entered a password. Please go back and sort it out."

As I say, I think they've resolved this now, but this was a glaring error for several years.</description>
		<content:encoded><![CDATA[<p>I&#8217;ve long been curious about this aspect of Amazon, it&#8217;s something I quite like about it because if you want to just browse for a bit, you don&#8217;t need to authenticate in order to get personally tailored content.</p>
<p>The one thing that did piss me off big time about Amazon (on the .co.uk at least, and I think they&#8217;ve fixed it recently), was their login form. It had the email address field, then radio buttons for &#8220;I&#8217;m new&#8221;, or &#8220;I&#8217;m a returning customer, and my password is: (text input field)&#8221;.</p>
<p>This is great and intuitive, but if you land on this page suddenly when you attempt to access order information or something on the high security level, your eye recognises a login form with two text input boxes and a login button. Straight away you type a password into the relevant field and hit enter on the keyboard, but wait! The radio button is still in the default position of &#8220;I&#8217;m new&#8221;. </p>
<p>They recognised the problem, but rather than solving the issue properly, they handled the symptom with a special error message: &#8220;You said you&#8217;re new but you entered a password. Please go back and sort it out.&#8221;</p>
<p>As I say, I think they&#8217;ve resolved this now, but this was a glaring error for several years.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: User First Web &#187; links for 2007-09-25</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89250</link>
		<dc:creator>User First Web &#187; links for 2007-09-25</dc:creator>
		<pubDate>Tue, 25 Sep 2007 07:27:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89250</guid>
		<description>[...] States of Login » UIE Brain Sparks Jared Spool explains the different levels of Amazon login. I&#8217;ve seen every type of behavior he describes, but never understood why Amazon was set up that way. His explanation helps a lot and Amazon should take his advice and add explanations to its site. (tags: amazon security ux userexperience usability) [...]</description>
		<content:encoded><![CDATA[<p>[...] States of Login » UIE Brain Sparks Jared Spool explains the different levels of Amazon login. I&#8217;ve seen every type of behavior he describes, but never understood why Amazon was set up that way. His explanation helps a lot and Amazon should take his advice and add explanations to its site. (tags: amazon security ux userexperience usability) [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Elaine</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89213</link>
		<dc:creator>Elaine</dc:creator>
		<pubDate>Mon, 24 Sep 2007 20:38:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89213</guid>
		<description>&lt;blockquote&gt;could it be as simple as changing the label for the functionality presented: what if instead of “sign in”, they asked the user to “verify your identity”&lt;/blockquote&gt;

IIRC, Yahoo does this, usually when you're switching from viewing (like news, personalized homepage, etc.) to potentially acting (email, Flickr, groups(?)).  I find their explanation very concise and helpful.</description>
		<content:encoded><![CDATA[<blockquote><p>could it be as simple as changing the label for the functionality presented: what if instead of “sign in”, they asked the user to “verify your identity”</p></blockquote>
<p>IIRC, Yahoo does this, usually when you&#8217;re switching from viewing (like news, personalized homepage, etc.) to potentially acting (email, Flickr, groups(?)).  I find their explanation very concise and helpful.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ron</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89211</link>
		<dc:creator>Ron</dc:creator>
		<pubDate>Mon, 24 Sep 2007 20:13:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89211</guid>
		<description>Jared, great article again. The comment i made in the article &lt;a href="http://www.uie.com/brainsparks/2007/09/14/the-sign-in-travesty/" rel="nofollow"&gt;&lt;em&gt;The Sign-in Travesty&lt;/em&gt;&lt;/a&gt; was one from a customer point-of-view. I'm aware of the security issues Amazon has to deal with, and i'm glad that they do ;)

I agree with you that Amazon would benefit from some extra customer guidance / extra information about the actions the user has to take and maybe just as important: the reason why. It will not only improve the usability for the user, but it also shows that Amazon handles your private information with care (and that will improve the user experience even more)!</description>
		<content:encoded><![CDATA[<p>Jared, great article again. The comment i made in the article <a href="http://www.uie.com/brainsparks/2007/09/14/the-sign-in-travesty/" rel="nofollow"><em>The Sign-in Travesty</em></a> was one from a customer point-of-view. I&#8217;m aware of the security issues Amazon has to deal with, and i&#8217;m glad that they do <img src='http://www.uie.com/brainsparks/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p>I agree with you that Amazon would benefit from some extra customer guidance / extra information about the actions the user has to take and maybe just as important: the reason why. It will not only improve the usability for the user, but it also shows that Amazon handles your private information with care (and that will improve the user experience even more)!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: zeldman</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89201</link>
		<dc:creator>zeldman</dc:creator>
		<pubDate>Mon, 24 Sep 2007 19:24:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89201</guid>
		<description>Brilliant, Jared.</description>
		<content:encoded><![CDATA[<p>Brilliant, Jared.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Eric Meyer</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89199</link>
		<dc:creator>Eric Meyer</dc:creator>
		<pubDate>Mon, 24 Sep 2007 19:15:56 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89199</guid>
		<description>Huh.  I always assumed that they were just poor developers, and forgot my login when going from module to module.  It never occurred to me that I was crossing into a different level of secureness.  (And buy.com does the same thing.)

&lt;a href="http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89197" rel="nofollow"&gt;Tom&lt;/a&gt;, you may need to keep trying until you find the right person-- I also had dual accounts due to a password muddle, but I got Amazon to merge them.  Granted, this was a while back and their policies may have since changed, but it may just be a matter of calling back until you get someone clueful.</description>
		<content:encoded><![CDATA[<p>Huh.  I always assumed that they were just poor developers, and forgot my login when going from module to module.  It never occurred to me that I was crossing into a different level of secureness.  (And buy.com does the same thing.)</p>
<p><a href="http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89197" rel="nofollow">Tom</a>, you may need to keep trying until you find the right person&#8211; I also had dual accounts due to a password muddle, but I got Amazon to merge them.  Granted, this was a while back and their policies may have since changed, but it may just be a matter of calling back until you get someone clueful.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tom</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89197</link>
		<dc:creator>Tom</dc:creator>
		<pubDate>Mon, 24 Sep 2007 18:49:55 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89197</guid>
		<description>Something else unusual is that account uniqueness is based on email address *and* password.  I got myself into a muddle with my passwords, and now have 2 accounts with the same name email address, but different passwords.  Lots of confusion occurs, as Amazon seems to have forgotten everything about me.

Once I worked out what was going on, I can make sure to use one or the other, but I still sometimes forget.

Amazon will not merge these two accounts.</description>
		<content:encoded><![CDATA[<p>Something else unusual is that account uniqueness is based on email address *and* password.  I got myself into a muddle with my passwords, and now have 2 accounts with the same name email address, but different passwords.  Lots of confusion occurs, as Amazon seems to have forgotten everything about me.</p>
<p>Once I worked out what was going on, I can make sure to use one or the other, but I still sometimes forget.</p>
<p>Amazon will not merge these two accounts.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Eric</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89194</link>
		<dc:creator>Eric</dc:creator>
		<pubDate>Mon, 24 Sep 2007 16:45:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89194</guid>
		<description>"So, to protect the user, Amazon makes them re-identify themselves by having them re-enter the credit card information." 

Partially, but that's not the whole reason. I send a lot of gifts with Amazon, and it seems like they remember which credit card you use to send things to which address. They remember you used your credit card to send a book to your office, but if you try to send something to a different address, you have to enter the card again because you're using it to send something to a new place. I guess this prevents someone from using your computer to buy something and send it to themselves?</description>
		<content:encoded><![CDATA[<p>&#8220;So, to protect the user, Amazon makes them re-identify themselves by having them re-enter the credit card information.&#8221; </p>
<p>Partially, but that&#8217;s not the whole reason. I send a lot of gifts with Amazon, and it seems like they remember which credit card you use to send things to which address. They remember you used your credit card to send a book to your office, but if you try to send something to a different address, you have to enter the card again because you&#8217;re using it to send something to a new place. I guess this prevents someone from using your computer to buy something and send it to themselves?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Eric Scheid</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89190</link>
		<dc:creator>Eric Scheid</dc:creator>
		<pubDate>Mon, 24 Sep 2007 16:25:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89190</guid>
		<description>could it be as simple as changing the label for the functionality presented: what if instead of "sign in", they asked the user to "verify your identity"</description>
		<content:encoded><![CDATA[<p>could it be as simple as changing the label for the functionality presented: what if instead of &#8220;sign in&#8221;, they asked the user to &#8220;verify your identity&#8221;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Alex Bischoff</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89188</link>
		<dc:creator>Alex Bischoff</dc:creator>
		<pubDate>Mon, 24 Sep 2007 15:31:35 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89188</guid>
		<description>I enjoyed this post -- you make some good points here :).

As a minor nit, I think you may have meant to include an apostrophe in the context of &#8220;using the users credit card&#8221;?</description>
		<content:encoded><![CDATA[<p>I enjoyed this post &#8212; you make some good points here :).</p>
<p>As a minor nit, I think you may have meant to include an apostrophe in the context of &ldquo;using the users credit card&rdquo;?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Natasha Lloyd</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89185</link>
		<dc:creator>Natasha Lloyd</dc:creator>
		<pubDate>Mon, 24 Sep 2007 15:03:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89185</guid>
		<description>The same type of login pattern is used on LinkedIn. When I first go to the site, it's personalized with updates for me about my network. However, if I try to do anything it feels is more "private", it prompts me for me password. It's a very annoying thing to do because it completely interrupts my thought process. 

It goes something like this: Open up LinkedIn. "It's been a while since I've been here, let me check if there's anyone new I know in my network." Click My Contacts tab. Click Colleagues link. Click Find New button. "Hmm, I don't recognize any of these people." Click "I don't know anyone here" link. Sign In page comes up. "WTF? That doesn't even makes sense! Why did it let me view my contacts, see the list of potential connections, and then when &lt;i&gt;I don't know anyone&lt;/i&gt;, it asks me for my login information?!"

At least with Amazon.com there's financial information to protect. What is LinkedIn trying to protect against, I wonder?</description>
		<content:encoded><![CDATA[<p>The same type of login pattern is used on LinkedIn. When I first go to the site, it&#8217;s personalized with updates for me about my network. However, if I try to do anything it feels is more &#8220;private&#8221;, it prompts me for me password. It&#8217;s a very annoying thing to do because it completely interrupts my thought process. </p>
<p>It goes something like this: Open up LinkedIn. &#8220;It&#8217;s been a while since I&#8217;ve been here, let me check if there&#8217;s anyone new I know in my network.&#8221; Click My Contacts tab. Click Colleagues link. Click Find New button. &#8220;Hmm, I don&#8217;t recognize any of these people.&#8221; Click &#8220;I don&#8217;t know anyone here&#8221; link. Sign In page comes up. &#8220;WTF? That doesn&#8217;t even makes sense! Why did it let me view my contacts, see the list of potential connections, and then when <i>I don&#8217;t know anyone</i>, it asks me for my login information?!&#8221;</p>
<p>At least with Amazon.com there&#8217;s financial information to protect. What is LinkedIn trying to protect against, I wonder?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michael Hughes</title>
		<link>http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89167</link>
		<dc:creator>Michael Hughes</dc:creator>
		<pubDate>Mon, 24 Sep 2007 11:20:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.uie.com/brainsparks/2007/09/23/states-of-login/#comment-89167</guid>
		<description>Jarad's explanation is very useful and points out a pattern I see a lot, namely the unconscious perspective from the devloper's side of "Since I know the user is safe (or the computer is crunching, or the data has been saved), it's not a user issue." One of the great benefits of usability testing has been the many aha moments I've witnessed where developers see users fear what the developer has already protected against, or redo what the program has done, or show anxiety over issues the programmer anticipated and took care of. As Jared points out, the solution is universal: Tell the user what and why.</description>
		<content:encoded><![CDATA[<p>Jarad&#8217;s explanation is very useful and points out a pattern I see a lot, namely the unconscious perspective from the devloper&#8217;s side of &#8220;Since I know the user is safe (or the computer is crunching, or the data has been saved), it&#8217;s not a user issue.&#8221; One of the great benefits of usability testing has been the many aha moments I&#8217;ve witnessed where developers see users fear what the developer has already protected against, or redo what the program has done, or show anxiety over issues the programmer anticipated and took care of. As Jared points out, the solution is universal: Tell the user what and why.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
